Verydows
Verydows: vulnerabilidades y CVE
Verydows tiene 8 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-29394 | Alta (8.1) | 0.66% | — | 9 abr 2025 | An insecure permissions vulnerability in verydows v2.0 allows a remote attacker to execute arbitrary code by uploading a file type. |
| CVE-2023-51949 | Alta (8.8) | 0.29% | — | 12 ene 2024 | Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /protected/controller/backend/role_controller |
| CVE-2020-23363 | Alta (8.8) | 0.38% | — | 9 may 2023 | Cross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions that allows an attacker to execute arbitrary code via a crafted script. |
| CVE-2022-28059 | Alta (8.1) | 1.2% | — | 26 abr 2022 | Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\database_controller.php. |
| CVE-2022-28058 | Alta (8.1) | 1.2% | — | 26 abr 2022 | Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\file_controller.php. |
| CVE-2019-8363 | Media (6.1) | 0.83% | — | 16 feb 2019 | Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value. |
| CVE-2019-7753 | Media (6.1) | 0.83% | — | 12 feb 2019 | Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter. |
| CVE-2019-7737 | Alta (8.8) | 0.65% | — | 11 feb 2019 | A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.